Lock dependency versions in setup.py
Lock dependency versions in setup.py, otherwise they are moving target, and can even make the build fail. See https://gitlab.com/gitlab-org/security-products/tests/python-pip/-/jobs/1938498688
Edited by Fabien Catteau